src/EventSubscriber/AccessSubscriber.php line 32

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpFoundation\RedirectResponse;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\HttpKernel\Event\RequestEvent;
  10. use Symfony\Component\HttpKernel\KernelEvents;
  11. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  12. use Symfony\Component\Security\Core\Security;
  14. class AccessSubscriber implements EventSubscriberInterface
  15. {
  16.     private Security $security;
  18.     private UrlGeneratorInterface $urlGenerator;
  19.     private const ACCESS_DENIED_ROUTE = 'app_403_page';
  20.     private const RESTRICTED_ROUTE_ARRAY = [
  21.         'dh_auditor_list_audits',
  22.         'dh_auditor_show_transaction',
  23.         'dh_auditor_show_entity_history'
  24.     ];
  26.     public function __construct(Security $security, UrlGeneratorInterface $urlGenerator){
  28.         $this->security = $security;
  29.         $this->urlGenerator = $urlGenerator;
  30.     }
  32.     public function onKernelRequest(RequestEvent $event)
  33.     {
  34.         $routeName = $event->getRequest()->attributes->get('_route');
  35.         $user = $this->security->getUser();
  37.         // Implement your logic to check user's userType and allowed routes
  38.         if ($user && $user->getUserType() !== 777 && in_array($routeName, self::RESTRICTED_ROUTE_ARRAY, true)) {
  39.             $event->setResponse(new RedirectResponse($this->urlGenerator->generate(self::ACCESS_DENIED_ROUTE)));
  41.         }
  42.     }
  44.     public static function getSubscribedEvents() : array
  45.     {
  46.         return [
  47.             KernelEvents::REQUEST => 'onKernelRequest',
  48.         ];
  49.     }
  52. }